{"id":15069509,"url":"https://github.com/philips-software/docker-openjdk","last_synced_at":"2025-10-05T06:31:24.589Z","repository":{"id":40371591,"uuid":"148758976","full_name":"philips-software/docker-openjdk","owner":"philips-software","description":"OpenJDK docker setup","archived":true,"fork":false,"pushed_at":"2023-09-25T05:25:58.000Z","size":195,"stargazers_count":6,"open_issues_count":6,"forks_count":4,"subscribers_count":8,"default_branch":"main","last_synced_at":"2024-09-30T13:05:32.226Z","etag":null,"topics":["docker-images","openjdk"],"latest_commit_sha":null,"homepage":null,"language":"Dockerfile","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/philips-software.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.md","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-09-14T08:25:40.000Z","updated_at":"2023-10-06T17:51:31.000Z","dependencies_parsed_at":"2024-09-25T01:43:06.690Z","dependency_job_id":"854a7622-d5d3-4ac9-bd93-4091845b31b4","html_url":"https://github.com/philips-software/docker-openjdk","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/philips-software%2Fdocker-openjdk","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/philips-software%2Fdocker-openjdk/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/philips-software%2Fdocker-openjdk/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/philips-software%2Fdocker-openjdk/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/philips-software","download_url":"https://codeload.github.com/philips-software/docker-openjdk/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":235370461,"owners_count":18979093,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["docker-images","openjdk"],"created_at":"2024-09-25T01:42:54.806Z","updated_at":"2025-10-05T06:31:19.269Z","avatar_url":"https://github.com/philips-software.png","language":"Dockerfile","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![Build Status](https://github.com/philips-software/docker-openjdk/workflows/build/badge.svg)](https://github.com/philips-software/docker-openjdk/actions/)\n[![Slack](https://philips-software-slackin.now.sh/badge.svg)](https://philips-software-slackin.now.sh)\n\n\u003e ⚠️ This repository is deprecated. No updates will be applied anymore. There are other ways of getting the latest version of openjdk.\n\u003e For example look at [Chainguard's images](https://www.chainguard.dev/chainguard-images)\n\n# Docker images\n\nThis repo will contain docker images with openjdk\n\nCurrent versions available:\n```\n.\n├── 11\n│   ├── jdk\n│   │   ├── slim\n│   │   │   └── Dockerfile\n│   │   ├── slim-aws\n│   │   │   └── Dockerfile\n│   │   ├── zulu\n│   │   │   └── Dockerfile\n│   │   └── zulu-docker\n│   │       └── Dockerfile\n│   └── jre\n│       ├── slim\n│       │   └── Dockerfile\n│       └── slim-aws\n│           └── Dockerfile\n├── 8\n│   ├── jdk\n│   │   └── alpine\n│   │       └── Dockerfile\n│   └── jre\n│       └── alpine\n│           └── Dockerfile\n```\n## Usage\n\nImages can be found on [https://hub.docker.com/r/philipssoftware/openjdk/](https://hub.docker.com/r/philipssoftware/openjdk/).\n\n```\ndocker run philipssoftware/openjdk:11 java -version\ndocker run philipssoftware/openjdk:11-jre java -version\ndocker run philipssoftware/openjdk:8 java -version\ndocker run philipssoftware/openjdk:8-jre java -version\n```\n\n## Content\n\nWe're signing these containers and creating the SLSA-provenance and SBOM for this project.\nYou can check the signature, SBOM and SLSA-provenance by installing [Cosign](https://github.com/sigstore/cosign) locally, get the `cosign.pub` file from the repository and perform the following steps:\n\n### Check signature\n\nThe containers are signed with Cosign. The public key can be found in the root of the repository in a file: `cosign.pub`.\n\n```bash\ncosign verify --key cosign.pub philipssoftware/openjdk:11-jdk-zulu\n```\n\n### Check SBOM\n\nThe SBOM is created with [Syft](https://github.com/anchore/syft) and is attached to the containers. You can verify the attestation with Cosign by executing the following command:\n\n```bash\ncosign verify-attestation --key cosign.pub philipssoftware/openjdk:11-jdk-zulu | jq '.payload |= @base64d | .payload | fromjson | select( .predicateType==\"https://spdx.dev/Document\" ) | .predicate.Data | fromjson | .'\n```\n\n### Check SLSA-Provenance file\n\nThe [SLSA-Provenance](https://slsa.dev) file is created with [SLSA-provenance-action](https://github.com/philips-labs/slsa-provenance-action) and is attached to the containers. You can verify the attestation with Cosign by executing the following command:\n\n```bash\ncosign verify-attestation --key cosign.pub philipssoftware/openjdk:11-jdk-zulu | jq '.payload |= @base64d | .payload | fromjson | select( .predicateType==\"https://slsa.dev/provenance/v0.2\" ) |  .'\n```\n\n### Other files\n\nThe images obviously contain openjdk, but also two other files:\n- `REPO`\n- `TAGS`\n\nThis was a way to provide some provenance on the containers. This is now deprecated in favor of the attestations mentioned above.\n\n#### REPO\n\nThis file has a url to the REPO with specific commit-sha of the build.\nExample: \n\n```\n$ docker run philipssoftware/openjdk:11 cat REPO\nhttps://github.com/philips-software/docker-openjdk/tree/facb2271e5a563e5d6f65ca3f475cefac37b8b6c\n```\n\n#### TAGS\n\nThis contains all the similar tags at the point of creation. \n\n```\n$ docker run philipssoftware/openjdk:11 cat TAGS\nopenjdk openjdk:11 openjdk:11-jdk openjdk:11-jdk-slim openjdk:11.0.16-jdk-slim\n```\n\nYou can use this to pin down a version of the container from an existing development build for production. When using `openjdk:11` for development. This ensures that you've got all security updates in your build. If you want to pin the version of your image down for production, you can use this file inside of the container to look for the most specific tag, the last one.\n\n## Simple Tags\n\n### openjdk\n- `openjdk`, `openjdk:11`, `openjdk:11-jdk`, `openjdk:11-jdk-slim`, `openjdk:11.0.16-jdk-slim` [11/jdk/slim/Dockerfile](11/jdk/slim/Dockerfile)\n- `openjdk:11-zulu`, `openjdk:11-jdk-zulu`, `openjdk:11-jdk-zulu`, `openjdk:11.0.16-jdk-zulu` [11/jdk/zulu/Dockerfile](11/jdk/zulu/Dockerfile)\n- `openjdk:11-jre`, `openjdk:11-jre-slim`, `openjdk:11.0.16-jre-slim` [11/jre/slim/Dockerfile](11/jre/slim/Dockerfile)\n- `openjdk:8`, `openjdk:8-jdk`, `openjdk:8-jdk-alpine`, `openjdk:8u322-jdk-alpine` [8/jdk/alpine/Dockerfile](8/jdk/alpine/Dockerfile)\n- `openjdk:8-jre`, `openjdk:8-jre-alpine`, `openjdk:8u322-jre-alpine` [8/jre/alpine/Dockerfile](8/jre/alpine/Dockerfile)\n\n### openjdk with aws-cli\n- `openjdk:11-aws`, `openjdk:11-jdk-aws`, `openjdk:11-jdk-slim-aws`, `openjdk:11.0.16-jdk-slim-aws` [11/jdk/slim-aws/Dockerfile](11/jdk/slim-aws/Dockerfile)\n- `openjdk:11-jre-aws`, `openjdk:11-jre-slim-aws`, `openjdk:11.0.16-jre-slim-aws` [11/jre/slim-aws/Dockerfile](11/jre/slim-aws/Dockerfile)\n\n### openjdk with docker\n- `openjdk:11-zulu-docker`, `openjdk:11-jdk-zulu-docker`, `openjdk:11-jdk-zulu-docker`, `openjdk:11.0.16-jdk-zulu-docker` [11/jdk/zulu-docker/Dockerfile](11/jdk/zulu-docker/Dockerfile)\n\n## Why\n\n\u003e Why do we have our own docker image definitions?\n\nWe often need some tools in a container for checking some things. F.e. [jq](https://stedolan.github.io/jq/), [aws-cli](https://aws.amazon.com/cli/) and [curl](https://curl.haxx.se/).\nWe can install this every time we need a container, but having this baked into a container seems a better approach.\n\nThat's why we want our own docker file definitions.\n\n## Issues\n\n- If you have an issue: report it on the [issue tracker](https://github.com/philips-software/docker-openjdk/issues)\n\n## Author\n\n- Jeroen Knoops \u003cjeroen.knoops@philips.com\u003e\n\n## License\n\nLicense is MIT. See [LICENSE file](LICENSE.md)\n\n## Philips Forest\n\nThis module is part of the Philips Forest.\n\n```\n                                                     ___                   _\n                                                    / __\\__  _ __ ___  ___| |_\n                                                   / _\\/ _ \\| '__/ _ \\/ __| __|\n                                                  / / | (_) | | |  __/\\__ \\ |_\n                                                  \\/   \\___/|_|  \\___||___/\\__|  \n\n                                                                 Infrastructure\n```\n\nTalk to the forestkeepers in the `docker-images`-channel on Slack.\n\n[![Slack](https://philips-software-slackin.now.sh/badge.svg)](https://philips-software-slackin.now.sh)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fphilips-software%2Fdocker-openjdk","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fphilips-software%2Fdocker-openjdk","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fphilips-software%2Fdocker-openjdk/lists"}